Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/43060d1236e15e448512a328b3ac27a6c12b2370.cer
File:                     43060d1236e15e448512a328b3ac27a6c12b2370.cer (raw, json)
Hash identifier:          yBw5RZy/69+aJns0ayb7QjnM1cD8ePKDtHgcBQWSKYg=
Subject key identifier:   3C:D6:58:74:2A:E9:AA:DC:08:3D:18:79:42:71:49:61:47:D7:A6:3B
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       DE5B49
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/8b12919b-96e8-4319-b142-ddbb3268b3e3/43060d1236e15e448512a328b3ac27a6c12b2370.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/8b12919b-96e8-4319-b142-ddbb3268b3e3/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 19 Aug 2020 19:22:01 +0000
Certificate not after:    Mon 11 Mar 2024 19:24:51 +0000
Subordinate resources:    AS: 264702
                          IP: 170.0.84.0/22
                          IP: 2803:b40::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14572361 (0xde5b49)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Aug 19 19:22:01 2020 GMT
            Not After : Mar 11 19:24:51 2024 GMT
        Subject: CN=43060d1236e15e448512a328b3ac27a6c12b2370
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:24:2a:8f:fe:b7:56:e2:2d:43:d6:01:19:73:
                    e0:af:98:4f:f9:fe:d5:6e:3c:f7:1a:2e:c1:13:64:
                    ba:59:8c:0a:c0:90:e3:19:4b:87:06:f1:2e:bc:51:
                    d6:c9:fa:c8:1b:d0:73:72:54:63:6d:9e:1b:61:72:
                    c6:9d:ce:fc:26:60:79:c0:3c:e6:0e:d7:e5:f2:5e:
                    3c:9f:44:45:a5:f2:b0:39:3b:ac:8d:29:d6:8e:0d:
                    b0:a5:c7:aa:67:cf:d7:16:cc:67:97:15:8c:ce:24:
                    98:c0:8f:a0:2b:c1:a0:eb:16:ed:cb:13:66:3f:df:
                    af:42:85:65:29:40:f0:92:d3:26:6e:a7:2b:cb:06:
                    3f:bc:a3:a0:fe:88:00:b5:92:e5:58:97:ff:9a:f3:
                    35:03:df:c6:ac:37:cc:e2:74:66:63:7f:14:6e:e5:
                    17:ed:55:10:1a:2e:b2:44:49:77:0a:49:cd:c7:2c:
                    73:24:0f:b8:2e:14:41:11:47:6b:4a:a8:4e:00:dd:
                    58:1d:a9:97:d0:6c:3d:45:ae:28:2e:cd:70:96:23:
                    72:0d:c2:2c:2f:07:04:01:09:2c:f6:b5:c7:00:85:
                    d4:c0:00:d4:ee:02:17:ad:69:3a:c8:39:dc:61:59:
                    69:59:79:37:bd:49:58:28:ae:54:92:12:ef:2e:4f:
                    61:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:D6:58:74:2A:E9:AA:DC:08:3D:18:79:42:71:49:61:47:D7:A6:3B
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/8b12919b-96e8-4319-b142-ddbb3268b3e3/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/8b12919b-96e8-4319-b142-ddbb3268b3e3/43060d1236e15e448512a328b3ac27a6c12b2370.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.0.84.0/22
                IPv6:
                  2803:b40::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264702

    Signature Algorithm: sha256WithRSAEncryption
         58:10:fc:b1:df:6e:9a:f8:55:d8:ba:d0:14:71:84:d8:b6:3b:
         09:d2:ef:1c:d2:e4:3b:ce:f2:3c:e8:d1:2e:65:7b:2f:ae:44:
         f1:c2:8b:45:a0:01:31:8f:bb:b2:5d:ce:e9:fa:bf:af:a5:47:
         4a:21:99:8f:d5:5a:1c:8d:78:69:bf:e0:00:12:d3:30:3b:ae:
         4e:35:06:4a:32:df:74:38:d1:d3:7b:53:09:0f:68:34:0d:cc:
         3a:72:63:0b:11:79:23:e6:cf:fa:27:15:00:fb:a3:f4:c8:ee:
         e4:51:54:41:f6:5a:1b:26:37:1c:2a:53:5c:ce:a9:93:1b:30:
         41:42:27:33:4b:11:b1:a7:a7:b1:ad:fb:9a:33:6f:c2:55:05:
         95:66:f0:32:d5:21:89:1e:5d:a8:6d:be:ce:0c:6d:01:61:11:
         04:46:69:39:7a:df:1e:4d:72:a9:3c:36:bf:71:1e:e5:68:92:
         36:a8:cd:a3:90:c0:3b:87:c3:a2:ac:11:46:78:6d:1a:26:4f:
         f5:4a:2c:9a:d1:10:ee:47:45:73:98:b3:96:d3:a8:f1:f5:8d:
         ed:c6:d6:75:e4:a4:79:59:4a:64:08:72:85:0b:93:d6:67:96:
         de:97:93:c4:66:f5:9d:0b:c2:da:9e:8a:39:be:b7:50:a7:ee:
         da:32:12:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----